Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: 0rRnmCuZ6hMXLtYaKEu+M0dxWhz7ey34Xv2QUiKAZHI=
Subject key identifier: A0:50:A0:60:86:9B:3C:88:6B:7B:71:B8:7B:30:CD:9B:0E:5D:75:69
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0198D7E10FAF7F347F528D83494115965FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1417
Signing time: Sat 23 Aug 2025 17:01:47 +0000
Manifest this update: Sat 23 Aug 2025 17:01:47 +0000
Manifest next update: Sun 24 Aug 2025 17:01:47 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: LI9rl2ySSDpc8O+/DGXquIayaUlylYAYFlqWsbpj06g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:0f:af:7f:34:7f:52:8d:83:49:41:15:96:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Aug 23 17:01:47 2025 GMT
Not After : Aug 24 17:01:47 2025 GMT
Subject: CN=a050a060869b3c886b7b71b87b30cd9b0e5d7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:21:67:16:a3:1f:1c:82:75:27:1d:6d:08:
cf:01:a2:ca:d8:d3:6c:4c:04:cd:f4:5b:49:26:7f:
31:f2:69:c0:6f:5d:df:81:ea:34:2a:66:a8:9a:11:
93:99:a8:d1:95:e9:88:0e:b9:49:d6:2d:97:45:a1:
ca:03:79:8c:92:ac:dd:e4:f3:1b:e9:59:8c:96:10:
06:20:4e:1f:ff:d9:75:b0:3e:49:60:87:5d:e6:9c:
21:ec:e9:6a:ba:28:09:83:f1:49:87:6a:f5:f1:7b:
ce:a5:53:b3:5f:d7:2e:03:4f:9e:2f:5d:50:ce:39:
2c:bb:19:2a:4f:67:e3:a9:c9:94:b2:10:cd:49:83:
dd:90:a5:94:c3:d7:1c:81:6b:ff:4c:ae:f9:15:91:
32:ed:9b:ce:b5:4d:c0:5d:2c:cf:1f:6f:38:43:34:
da:7b:fe:c8:fc:f7:f0:56:8c:64:a5:4a:1f:59:ce:
d8:84:4c:16:88:93:96:1c:c6:97:ba:e1:6b:4c:d2:
dd:c3:5b:25:16:ab:48:b5:eb:8f:52:e2:eb:33:90:
ab:ca:80:a9:eb:bf:a7:7e:bf:88:d3:d8:a7:f9:d4:
97:f2:2a:b6:9c:6b:df:96:d3:a3:b7:92:04:3e:35:
bb:b5:10:d6:98:b2:21:f3:d1:87:09:a6:0a:53:1f:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:50:A0:60:86:9B:3C:88:6B:7B:71:B8:7B:30:CD:9B:0E:5D:75:69
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:dc:54:2e:f6:9b:bd:fe:73:a2:3d:3f:90:04:9f:d7:76:
b4:b6:52:09:a9:30:85:48:e6:5a:f8:bb:33:72:44:15:ec:78:
13:92:79:8d:5d:b7:39:f7:14:34:be:e9:8d:64:f9:67:67:fe:
9b:cb:62:38:06:a4:19:b6:34:19:4b:21:0c:af:6e:02:40:fe:
4e:f3:49:f7:da:54:9c:40:25:0b:36:0b:ca:28:51:18:31:0c:
28:04:ea:18:4b:36:3a:a3:32:6f:73:de:fe:d0:34:09:ee:1c:
55:b9:5e:11:9f:7c:72:6e:ac:a2:89:5d:39:bc:95:97:91:bf:
5c:2d:51:72:44:1e:6b:83:ed:7a:a0:2f:38:59:30:3e:53:14:
03:61:01:16:cb:ea:e2:25:06:d2:0c:59:74:d7:9c:8c:96:4c:
17:04:c7:4f:c6:02:a6:a7:e0:6a:c8:55:c6:84:08:0e:40:10:
c4:86:66:e7:98:6e:71:e0:e8:e2:d5:b9:1b:e4:15:ba:60:1d:
d1:1a:00:14:14:6c:37:c3:0c:0a:4c:7a:61:33:5c:85:7d:f7:
b2:ae:62:3f:83:a3:36:03:4e:57:57:95:cd:8f:c0:f8:be:da:
d4:1a:da:7b:c9:73:73:cc:44:ff:c1:cd:37:53:96:fd:25:be:
43:06:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:46 2025 by rpki-client